If CRL checking is enabled on the Cisco ASA, where can the Cisco ASA find the CRL?

If CRL checking is enabled on the Cisco ASA, where can the Cisco ASA find the CRL?

A.
The Cisco ASA polls the CA for an updated list at a predefined rate.

B.
The CA sends a CRL to the Cisco ASA directly at least once a week.

C.
The CRL distribution point is listed on the identity certificate.

D.
The CRL is sent out-of-band to the administrator at a negotiated rate, typically biweekly.

E.
The CRL distribution point can be configured in the Connection Profile or Group Policy.